Active directory question

[EddieRWB]

In active directory we set our OU's up by building.

Problem is when we have a user/group of users that moves between buildings it is easy to move the user account to that different OU.
But the main issue is our computer accounts aren't named using the users name/last name which would make it easy to find in AD. We use the computer serial number as the computer name.
Is there a tool that would be able to locate which computer account is associated to which user account so moving them in AD would be easy? Thanks for your input on this one.

 

[SnoopFrogg]

I don't think there's a one-to-one mapping of computer accounts to user SIDs in AD, but I am by no means an expert on writing queries for AD.

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[djtech2k]

I would suggest the Quest reporter tool. It will allow you to associate users to machines and also tell you what profiles are on the machines. You can also do this with SMS.

On a side note, I think there is a property you may be able to assign on a user object that is called something like "primary workstation". If you can do it, you could use that for your search/move criteria.

 

[Larsdemo]

fill in the description in the userprofile

lars

Network admin for worldwide freight forwarders company.
mcp mcsa\: Messaging mcse -2003

 

[SnoopFrogg]

I think Lars' suggestion is the most reasonable. Querying the description field is fairly straight-forward.

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[EddieRWB]

All good ideas, one main hitch is AD now has 3000 users & computer accounts broken up between 7 different building OU's with blank description fields migrated from Novell. I wonder if there would be a script that could do this?

 

[djtech2k]

yes a script could do it BUT you would need some type of source that linked username to machine name in order to insert it into AD. For example, if you have an access database that has this stuff recorded, it could work as an input to script against.

 

[JAC5528]

Try this link:

http://www.microsoft.com/technet/scriptcenter/resources/qanda/apr05/hey0429.mspx

Good Luck.